[sanesecurity] Re: clamd crashes, or lack there of

From: James Ferreira <jferreira@xxxxxxxx>
To: sanesecurity@xxxxxxxxxxxxx
Date: Thu, 19 Mar 2009 10:27:06 -0600

>
> 2. Database reload (due to freshclam - I think it uses the signal) +
> database reload (due to sanesecurity download scripts, might be signals or
> something else).



I have had 3 crashes in 3 weeks but with the restart script and backup AV it
is not a critical problem for me. Just saying this because the signatures
work great and would not want new subscribers to think they are not worth
it. They are!!!

Ubuntu 8.10, ClamAV 0.94.2
Traffic peak around 3,000/hour

-------------------
Mar  5 02:51:15 2009 -> Reading databases from /var/lib/clamav

Mar  5 02:51:15 mta-2 kernel: [144095.519534] clamd[23424]:segfault at 4 ip
b7f0eac4 sp b46fe2a0 error 4 in libclamav.so.5.0.4[b7f04000+a5000]

----------------------
Mar 18 04:45:27 2009 -> Reading databases from /var/lib/clamav

Mar 18 04:45:27 mta-2 kernel: [40503.580417] clamd[19966]: segfault at
2173a640 ip b7e7dac4 sp b78282a0 error 4 in
libclamav.so.5.0.4[b7e73000+a5000]

----------------------
Mar 18 16:00:01 2009 -> Reading databases from /var/lib/clamav

Mar 18 16:00:02 mta-2 kernel: [80978.240174] clamd[20239]: segfault at 4 ip
b7f82ac4 sp bfe4a000 error 4 in libclamav.so.5.0.4[b7f78000+a5000]

-----------------------

My Unofficial.sh runs at:
 7 */4 * * * /usr/sbin/unofficial-clamav-sigs.sh

This does not correlate with any of the crashes so it would seem we could
take the signature download script out of the equation.

-- debugLibClamAV debug: /var/lib/clamav//daily.cld loaded
LibClamAV debug: /var/lib/clamav//MSRBL-Images.hdb loaded
LibClamAV debug: /var/lib/clamav//spamimg.hdb loaded
LibClamAV debug: /var/lib/clamav//scam.ndb loaded
LibClamAV debug: Loaded 8 filetype definitions
LibClamAV debug: /var/lib/clamav//sanesecurity.ftm loaded
LibClamAV debug: /var/lib/clamav//securiteinfo.hdb loaded
LibClamAV debug: /var/lib/clamav//spam.ldb loaded
LibClamAV debug: /var/lib/clamav//vx.hdb loaded
LibClamAV debug: /var/lib/clamav//lott.ndb loaded
LibClamAV debug: /var/lib/clamav//phish.ndb loaded

It all looks fine.
Will be going to .95 soon.

James

References:
- [sanesecurity] clamd crashes, or lack there of
  - From: Chris
- [sanesecurity] Re: clamd crashes, or lack there of
  - From: Steve Basford
- [sanesecurity] Re: clamd crashes, or lack there of
  - From: Bill Maidment
- [sanesecurity] Re: clamd crashes, or lack there of
  - From: Henrique de Moraes Holschuh

[sanesecurity] Re: clamd crashes, or lack there of

Other related posts: